Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032393a3a2f34382d3438203d3e20323037303731.roa
File: 326130653a386630323a663032393a3a2f34382d3438203d3e20323037303731.roa (raw, json)
Hash identifier: 9OZkVySf6/FnG8qSTfs0d6btW9mFt8QHoVdfTrIWDuQ=
Subject key identifier: 07:12:3F:55:37:F8:0C:88:8E:0A:80:BA:A1:39:F9:C1:76:4C:DE:52
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 182D3CACBCF7C25038E31DF2438A210289356859
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032393a3a2f34382d3438203d3e20323037303731.roa
Signing time: Thu 22 Oct 2026 19:49:55 +0000
ROA not before: Thu 22 Oct 2026 19:44:55 +0000
ROA not after: Thu 21 Oct 2027 19:49:55 +0000
asID: 207071
IP address blocks: 2a0e:8f02:f029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2d:3c:ac:bc:f7:c2:50:38:e3:1d:f2:43:8a:21:02:89:35:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:55 2026 GMT
Not After : Oct 21 19:49:55 2027 GMT
Subject: CN=07123F5537F80C888E0A80BAA139F9C1764CDE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:f2:a3:4a:66:22:d5:b9:27:12:00:8b:10:
b8:3a:06:60:dd:f7:8f:95:6b:56:dc:91:51:70:00:
ae:ea:9e:49:5f:62:dc:71:27:85:18:53:08:ed:ec:
dd:e7:b9:72:64:b4:ae:2f:1c:1e:70:96:aa:94:99:
de:6d:24:ec:56:45:8a:8c:b4:be:7a:02:4b:ad:74:
33:31:7b:8c:54:c7:27:6a:16:da:09:b8:c3:eb:e5:
48:58:72:37:6a:cb:aa:15:ff:22:e7:ff:42:11:e8:
36:10:a4:25:d8:30:c4:e2:7e:18:a3:b8:c3:8f:fc:
81:60:75:77:98:e8:56:be:d4:ad:68:d6:41:85:fe:
4b:4a:07:ca:0f:f0:a0:ec:15:94:1f:e9:2e:99:b0:
16:53:2b:09:a5:d0:ed:8d:ec:62:26:7f:ee:14:33:
b9:f9:fd:a3:7e:cf:be:f6:78:4d:53:57:b5:a8:fb:
74:9b:23:72:4d:c8:68:c8:b5:ac:ad:c2:35:40:83:
1f:c1:8f:13:9b:91:60:93:01:ce:b4:d4:e6:86:27:
8c:8f:ac:a0:2f:9b:c1:2f:3d:cb:a4:87:f4:00:63:
6f:ee:a7:38:b9:a9:88:b6:55:49:22:ef:34:e1:0c:
12:48:e7:82:33:d5:2b:9d:18:0e:92:c5:83:d3:6e:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:3F:55:37:F8:0C:88:8E:0A:80:BA:A1:39:F9:C1:76:4C:DE:52
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032393a3a2f34382d3438203d3e20323037303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f029::/48
Signature Algorithm: sha256WithRSAEncryption
42:2a:f1:5d:b3:20:30:db:3f:a6:5a:c5:16:d3:50:44:12:3b:
08:9e:6b:27:ee:f8:3b:63:9c:7a:02:30:4b:ae:44:20:73:05:
c4:ba:2a:ab:dc:2d:f8:60:be:31:20:2d:6b:6c:36:0c:26:bc:
6f:fc:67:5c:f0:a7:41:0d:26:87:fc:0e:ac:b3:3d:3e:ea:33:
58:45:e4:44:87:fd:4d:a0:21:31:78:63:54:8f:49:70:ce:90:
b7:4c:45:59:08:56:de:c5:b2:af:f4:f2:96:09:39:ba:39:88:
b0:66:04:5b:3b:61:f1:51:7f:43:00:1d:32:b8:2d:aa:f5:16:
eb:90:f5:54:28:26:fe:da:53:94:75:84:d1:55:57:50:65:db:
ca:93:a6:49:d7:ac:d7:01:4a:b8:bd:35:05:82:6b:dc:8b:6a:
f9:ab:fa:7b:c4:75:b2:66:de:ec:07:9b:30:37:8d:d5:9a:33:
73:7e:04:81:8f:60:d9:1a:85:0e:02:5f:9b:30:88:24:5b:4d:
84:4e:a1:c6:0a:4a:13:c1:5c:83:e3:f0:a3:d8:1e:a9:77:ee:
1d:58:72:fb:8c:ce:f2:ef:f1:e8:a9:bc:61:52:e2:88:e3:bb:
65:6a:45:a3:9a:d8:88:4b:c1:86:21:46:31:51:c6:40:70:e6:
75:71:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:54:36 2026 by rpki-client